Behavioral task
behavioral1
Sample
752a0fbebea5310566570c3c48529de8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
752a0fbebea5310566570c3c48529de8.exe
Resource
win10v2004-20231215-en
General
-
Target
752a0fbebea5310566570c3c48529de8
-
Size
1.5MB
-
MD5
752a0fbebea5310566570c3c48529de8
-
SHA1
5138fed3daefefb89b89a281a6c8996aeeb3cb75
-
SHA256
b44ce6b2a05cbe8c02bac1c3416fb5d20445c693f95910a4f50888ab157253c5
-
SHA512
1f125aa33698dff5cad19e40afd267b8cc74b65752ab5c217bab211c5343f4ec4128cb7e6be2ab5774634641e3ed9e1838f0b62a4d66047e6c02bc3af30d43cc
-
SSDEEP
24576:j7rStWrLN66U+pskQqK4YNQ09SGPLpPtWxyaf/UX+vKSOrGkBWW:vWtWM6DakQz4r09SW1afsbw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 752a0fbebea5310566570c3c48529de8
Files
-
752a0fbebea5310566570c3c48529de8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE